Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Custom amount has min/max option (spam/fraud prevention) #89

Open
splendidrob opened this issue Jul 20, 2022 · 2 comments
Open

Custom amount has min/max option (spam/fraud prevention) #89

splendidrob opened this issue Jul 20, 2022 · 2 comments

Comments

@splendidrob
Copy link

What are you trying to do?

We are seeing a few cases of fraudulent transactions on a site mainly using the gift card custom amount, seemingly to test stolen card details against a small transaction cost ($1 etc...) we are seeing thousands of transactions against the order until finally a card works. We are mitigating this by setting a min amount on our front end form and also recaptcha etc, but we think it would be helpful to have a minimum option in the gift voucher plugin also.

What's your proposed solution?

Custom gift vouchers have an optional min/max amount setting.

Additional context

No response

@engram-design
Copy link
Member

Unfortunately that's the pitfall of virtual payments, and we see similar abuse on donation sites, where users are testing stolen cards quickly/easily with no need for shipping costs.

For the moment, the way to handle this is through enforcing a min attribute on the input on the front-end, but happy to add a mechanism server-side to set this as well, which would be handy. Same for a maximum amount.

@bymayo
Copy link

bymayo commented May 4, 2023

We'd also like to see this, so that min/max could be set in a voucher or code as currently even with adding a min attribute to the field, you can still easily get around it (If you know how to)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants